SlowMist founder: The Binance hack was an APT attack and should not be blamed solely on engin

SlowMist founder Cos (@evilcos) said on X that the recent Binance theft should be classified as an advanced persistent threat (APT) attack rather than blamed solely on an engineer's basic error or excessive permissions. He noted the breach spanned social engineering, intelligence reconnaissance, malware evasion, trust-chain exploitation, targeted lateral poisoning, cloud-environment penetration, risk-control bypasses and zero-day vulnerabilities. The incident matters because it reframes exchange security failures as multi-layered adversarial campaigns rather than single points of human error. What to watch next is whether Binance and other exchanges adjust permission scoping, cloud hardening and threat-intelligence practices in response.